filemanager_pro-filester vulnerabilities

2 known vulnerabilities in filemanager_pro-filester from NinjaTeam. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  File Manager Pro – Filester: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-9669Nov 28, 2024NinjaTeam

  The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.8.5 via the 'fm_locale' parameter. This makes it possible for authenticated attackers, with Administrator-level access

• 8.8 High severity

  File Manager Pro – Filester: Unrestricted Upload of File with Dangerous Type

  CVE-2024-8066Nov 28, 2024NinjaTeamEPSS 1.15%

  The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing validation in the 'fsConnector' function in all versions up to, and including, 1.8.6. This makes it possible for authenticated attackers, with Subscribe